isc capstone network design proposal

ITT TECHNICAL INSTITUTE

NETWORK DESIGN PROPOSAL

PREPARED FOR ISC CAPSTONE

Student Name

XVI ·· MARCH ·· MMXIV

Abstract: This document is part of the ITT Technical Institute Information Systems and Cybersecurity Bachelorette Degree Capstone project for the graduating class of March 2014. It is part of a collaboration of many different elements which make up the overall ISC Capstone class project.

1

Table of Contents

I. INTRODUCTION 2

II. DESIGN CONSIDERATIONS 2

WAN Services 2

LAN Services 2

Network Fundamentals 2

Security Services 3

III. NETWORK DIAGRAMS AND TOPOLOGIES 4

WAN Topology 4

IV. SYSTEM COMPONENTS 4

V. CONFIGURATIONS 5

2

I. INTRODUCTION

The implementation of a Service Ready Medium Branch Network enables

enterprises with branch offices of 50 to 100 users to deploy high-value network

services such as unified communication and application optimization on top of a

secure branch network infrastructure that is connected to a campus or data center

core (central site) over a variety of WAN technologies. The goal of the Services

Ready Medium Branch Network is to make deployment of these services fast,

simple, and predictable.

The design, test and deployment of this Services Ready Medium Branch Network

will focus on the key elements to ensure the consistent connectivity and mandatory

security requirements for data, voice, and application optimization services.

II. DESIGN CONSIDERATIONS

WAN Services

Layer 3 Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN)

for increased flexibility and reduced bandwidth cost

Dedicated bandwidth ranging from 6 to 44 Mb/s to handle data, voice, and

video traffic

LAN Services

Hierarchical network design to simplify deployment, troubleshooting, and

management

Connectivity to branch devices at Fast Ethernet or Gigabit Ethernet speeds

Near-wire-speed performance between all devices

Provisions for accommodating future expansion

Networking device redundancy without traffic loops

Power-over-Ethernet (PoE)

Network Fundamentals

High availability, rapid recovery, and disaster recovery

Rapid recovery in case of component failure

Automatic switchover to backup WAN link that has a minimum one-quarter of

the bandwidth of the primary WAN link

Ability to restore service within 24 hours in the event of a disaster

Quality of service (QoS)

3

Application-specific traffic prioritization both within the branch office and

across the enterprise

Bandwidth management for WAN-based traffic

Provisions for IP telephony, business video, critical and bulk data applications

Provisions to mitigate denial of service (DoS) and worm attacks

Identification and classification of critical application flows for QoS

IP routing and addressing

Routing within the enterprise and between the branch and the service

provider network

Direct Internet access from the branch

Support for multicast applications

Translation of private addresses and ports in order to access the Internet

Dynamic allocation of IP addresses for end devices

Security Services

Infrastructure protection

Physical securing of access to networking devices

Disabling of unused services that may be used to exploit the network

Authentication of routing protocol updates

Access control

Authentication and authorization services for controlling access to network

resources

Logging capabilities for auditing access to network devices and resources

Integration with global access management system to enforce access

privileges

Secure connectivity

Secure interoffice connectivity for full-mesh and hub-and-spoke WAN

topologies

Secure access into the branch network for remote or home office workers

Voice, video, and data separation on the LAN

Separation of network management traffic

Access to the server in the branch by home office users

Threat protection, detection, and mitigation

Blocking of unauthorized traffic from entering or leaving the branch

Access to servers in the branch by home office users

Verification of source addresses for incoming traffic

Identification and mitigation of common DoS attacks and worms

Prevention of malicious attacks on the branch office network from outside

Prevention of attacks and security breaches from within the branch office

4

III. NETWORK DIAGRAMS AND TOPOLOGIES

WAN Topology

IV. SYSTEM COMPONENTS

Device Platform Modules

P1 Cisco 2851 IS Router 4 - WIC 1DSU-T1 V2 WAN Interface Card

P2 Cisco 2851 IS Router 4 - WIC 1DSU-T1 V2 WAN Interface Card

PE1 Cisco 2811 IS Router 3 - WIC 1DSU-T1 V2 WAN Interface Card




VRF1 CE1 Cisco 2610XM Router 2 - WIC 1DSU-T1 V2 WAN Interface Card Cisco NM-1FE-TX 10/100 Fast Ethernet

VRF1 CE2 Cisco 2610XM Router 2 - WIC 1DSU-T1 V2 WAN Interface Card Cisco NM-1FE-TX 10/100 Fast Ethernet

5

HQ GW Cisco 2610XM Router Cisco NM-1FE-TX 10/100 Fast Ethernet

BR GW Cisco 2610XM Router Cisco NM-1FE-TX 10/100 Fast Ethernet

HQ CORE SW

Catalyst 3550-24 EMI N/A

BR CORE SW


HQ ACCESS SW


BR ACCESS SW


V. CONFIGURATIONS

hostname P1 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.0.1 255.255.255.255 ! interface GigabitEthernet0/0 description Connected to P2 Fa0/0 ip address 10.1.0.1 255.255.255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface GigabitEthernet0/1 description Connected to P2 Fa2/0 ip address 10.1.0.5 255.255.255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface Serial0/0/0 description Connected to PE1 S1/0 ip address 10.1.1.1 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1/0

6

description Connected to PE2 S1/0 ip address 10.1.1.5 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to PE3 S1/0 ip address 10.1.1.9 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to PE4 S1/0 ip address 10.1.1.13 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.0.1 network 10.0.0.1 0.0.0.0 area 0 network 10.1.0.0 0.0.0.7 area 0 network 10.1.1.0 0.0.0.15 area 0 ! router bgp 65000 bgp router-id 10.0.0.1 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.0.2 remote-as 65000 neighbor 10.0.0.2 update-source Loopback0 neighbor 10.0.0.2 send-community extended neighbor 10.0.1.1 peer-group MPLS neighbor 10.0.1.2 peer-group MPLS neighbor 10.0.1.3 peer-group MPLS neighbor 10.0.1.4 peer-group MPLS ! address-family vpnv4 neighbor MPLS send-community extended neighbor MPLS route-reflector-client

7

neighbor 10.0.1.1 activate neighbor 10.0.1.2 activate neighbor 10.0.1.3 activate neighbor 10.0.1.4 activate exit-address-family

hostname P2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.0.2 255.255.255.255 ! interface GigabitEthernet0/0 description Connected to P1 Fa0/0 ip address 10.1.0.2 255.255.255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface GigabitEthernet0/1 description Connected to P1 Fa2/0 ip address 10.1.0.6 255.255.255.252 ip ospf network point-to-point duplex auto speed auto mpls traffic-eng tunnels ! interface Serial0/0/0 description Connected to PE1 S1/1 ip address 10.1.2.1 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to PE2 S1/1 ip address 10.1.2.5 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to PE3 S1/1 ip address 10.1.2.9 255.255.255.252

8

ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to PE4 S1/1 ip address 10.1.2.13 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.0.2 network 10.0.0.2 0.0.0.0 area 0 network 10.1.0.0 0.0.0.7 area 0 network 10.1.2.0 0.0.0.15 area 0 ! router bgp 65000 bgp router-id 10.0.0.2 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.0.1 remote-as 65000 neighbor 10.0.0.1 update-source Loopback0 neighbor 10.0.0.1 send-community extended neighbor 10.0.1.1 peer-group MPLS neighbor 10.0.1.2 peer-group MPLS neighbor 10.0.1.3 peer-group MPLS neighbor 10.0.1.4 peer-group MPLS ! address-family vpnv4 neighbor MPLS send-community extended neighbor MPLS route-reflector-client neighbor 10.0.1.1 activate neighbor 10.0.1.2 activate neighbor 10.0.1.3 activate neighbor 10.0.1.4 activate exit-address-family

hostname PE1 ip cef no ip dhcp use vrf connected ip dhcp excluded-address 172.16.100.1

9

! ip dhcp pool sdm-pool1 network 172.16.100.0 255.255.255.252 default-router 172.16.100.1 ! ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! no ip domain lookup ! multilink bundle-name authenticated mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.1.1 255.255.255.255 ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.0.1.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic ! interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.0.1.3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0 tunnel destination 10.0.1.4 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic

10

! interface FastEthernet0/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 description $ETH-LAN$ ip address 172.16.100.1 255.255.255.252 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S0/0/0 ip address 10.1.1.2 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S0/0/0 ip address 10.1.2.2 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE1 S0/1 ip vrf forwarding vrf1 ip address 192.168.1.2 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE1 S0/0 ip vrf forwarding vrf2 ip address 192.168.1.2 255.255.255.252 ip ospf network point-to-point

11

mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.1.1 log-adjacency-changes network 10.0.1.1 0.0.0.0 area 0 network 10.1.1.2 0.0.0.0 area 0 network 10.1.2.2 0.0.0.0 area 0 ! router bgp 65000 bgp router-id 10.0.1.1 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.0.1 peer-group MPLS neighbor 10.0.0.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.0.0.1 activate no neighbor 10.0.0.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.0.0.1 activate neighbor 10.0.0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.168.1.1 remote-as 64512 neighbor 192.168.1.1 activate neighbor 192.168.1.1 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1

12

neighbor 192.168.1.1 remote-as 64512 neighbor 192.168.1.1 activate neighbor 192.168.1.1 as-override maximum-paths 2 no synchronization exit-address-family ! ip nat inside source list 1 interface FastEthernet0/0 overload ! access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.16.100.0 0.0.0.3

hostname PE2 ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.1.2 255.255.255.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.0.1.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.0.1.3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0

13

tunnel destination 10.0.1.4 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/1 ip address 10.1.1.6 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/1 ip address 10.1.2.6 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE1 S1/1 ip vrf forwarding vrf1 ip address 192.168.1.6 255.255.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE1 S1/1 ip vrf forwarding vrf2 ip address 192.168.1.6 255.255.255.252

14

service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.1.2 log-adjacency-changes network 10.0.1.2 0.0.0.0 area 0 network 10.1.1.6 0.0.0.0 area 0 network 10.1.2.6 0.0.0.0 area 0 ! router bgp 65000 no synchronization bgp router-id 10.0.1.2 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor MPLS send-community extended neighbor 10.0.0.1 peer-group MPLS no neighbor 10.0.0.1 activate neighbor 10.0.0.2 peer-group MPLS no neighbor 10.0.0.2 activate no auto-summary ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.0.0.1 activate neighbor 10.0.0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.168.1.5 remote-as 64512 neighbor 192.168.1.5 activate neighbor 192.168.1.5 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1 neighbor 192.168.1.5 remote-as 64512 neighbor 192.168.1.5 activate neighbor 192.168.1.5 as-override maximum-paths 2

15

no synchronization exit-address-family

hostname PE3 ! ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! no ip dhcp use vrf connected ip dhcp excluded-address 172.16.200.1 ! ip dhcp pool sdm-pool1 network 172.16.200.0 255.255.255.252 default-router 172.16.200.1 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.1.3 255.255.255.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.0.1.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.0.1.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic ! interface Tunnel4 ip unnumbered Loopback0 tunnel destination 10.0.1.4

16

tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 4 dynamic no routing dynamic ! interface FastEthernet0/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 description $ETH-LAN$ ip address 172.16.200.1 255.255.255.252 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/2 ip address 10.1.1.10 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels no fair-queue service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/2 ip address 10.1.2.10 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE2 S1/0 ip vrf forwarding vrf1 ip address 192.168.1.10 255.255.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE2 S1/0

17

ip vrf forwarding vrf2 ip address 192.168.1.10 255.255.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.1.3 log-adjacency-changes network 10.0.1.3 0.0.0.0 area 0 network 10.1.1.10 0.0.0.0 area 0 network 10.1.2.10 0.0.0.0 area 0 ! router bgp 65000 bgp router-id 10.0.1.3 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.0.1 peer-group MPLS neighbor 10.0.0.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.0.0.1 activate no neighbor 10.0.0.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.0.0.1 activate neighbor 10.0.0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.168.1.9 remote-as 64512 neighbor 192.168.1.9 activate neighbor 192.168.1.9 as-override maximum-paths 2 no synchronization exit-address-family !

18

address-family ipv4 vrf vrf1 neighbor 192.168.1.9 remote-as 64512 neighbor 192.168.1.9 activate neighbor 192.168.1.9 as-override maximum-paths 2 no synchronization exit-address-family ! ip nat inside source list 1 interface FastEthernet0/0 overload ! access-list 1 remark SDM_ACL Category=2 access-list 1 permit 172.16.200.0 0.0.0.3

hostname PE4 ! ip cef ip vrf vrf1 rd 64512:1 route-target export 64512:1 route-target import 64512:1 ! ip vrf vrf2 rd 64512:2 route-target export 64512:2 route-target import 64512:2 ! mpls traffic-eng tunnels ! interface Loopback0 ip address 10.0.1.4 255.255.255.255 ! interface Tunnel1 ip unnumbered Loopback0 tunnel destination 10.0.1.1 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 1 dynamic no routing dynamic ! interface Tunnel2 ip unnumbered Loopback0 tunnel destination 10.0.1.2 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 2 dynamic no routing dynamic !

19

interface Tunnel3 ip unnumbered Loopback0 tunnel destination 10.0.1.3 tunnel mode mpls traffic-eng tunnel mpls traffic-eng autoroute announce tunnel mpls traffic-eng path-option 3 dynamic no routing dynamic ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 description Connected to P1 S1/3 ip address 10.1.1.14 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/1/0 description Connected to P2 S1/3 ip address 10.1.2.14 255.255.255.252 ip ospf network point-to-point mpls traffic-eng tunnels service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/2/0 description Connected to VRF1-CE2 S1/1 ip vrf forwarding vrf1 ip address 192.168.1.14 255.255.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! interface Serial0/3/0 description Connected to VRF2-CE2 S1/1 ip vrf forwarding vrf2

20

ip address 192.168.1.14 255.255.255.252 service-module t1 clock source internal service-module t1 timeslots 1-24 ! router ospf 65000 mpls traffic-eng router-id Loopback0 mpls traffic-eng area 0 router-id 10.0.1.4 log-adjacency-changes network 10.0.1.4 0.0.0.0 area 0 network 10.1.1.14 0.0.0.0 area 0 network 10.1.2.14 0.0.0.0 area 0 ! router bgp 65000 bgp router-id 10.0.1.4 bgp log-neighbor-changes timers bgp 12 36 neighbor MPLS peer-group neighbor MPLS remote-as 65000 neighbor MPLS update-source Loopback0 neighbor 10.0.0.1 peer-group MPLS neighbor 10.0.0.2 peer-group MPLS ! address-family ipv4 neighbor MPLS send-community extended no neighbor 10.0.0.1 activate no neighbor 10.0.0.2 activate no auto-summary no synchronization exit-address-family ! address-family vpnv4 neighbor MPLS send-community extended neighbor 10.0.0.1 activate neighbor 10.0.0.2 activate exit-address-family ! address-family ipv4 vrf vrf2 neighbor 192.168.1.13 remote-as 64512 neighbor 192.168.1.13 activate neighbor 192.168.1.13 as-override maximum-paths 2 no synchronization exit-address-family ! address-family ipv4 vrf vrf1

21

neighbor 192.168.1.13 remote-as 64512 neighbor 192.168.1.13 activate neighbor 192.168.1.13 as-override maximum-paths 2 no synchronization exit-address-family

hostname VRF1-CE1 ! ip cef ! no ip dhcp use vrf connected ip dhcp excluded-address 10.10.100.1 10.10.100.100 ip dhcp excluded-address 10.10.100.200 10.10.100.254 ! ip dhcp pool sdm-pool1 import all network 10.10.100.0 255.255.255.0 default-router 10.10.100.1 dns-server 10.10.100.21 4.2.2.2 domain-name CAPSTONE.LOCAL ! no ip domain lookup ip name-server 10.10.100.1 ip name-server 4.2.2.2 ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! interface Loopback0 ip address 10.255.0.1 255.255.255.255 ! interface FastEthernet0/0 ip address 10.10.100.1 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0 description Connected to PE1 S1/2 ip address 192.168.1.1 255.255.255.252 no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1 description Connected to PE2 S1/2 ip address 192.168.1.5 255.255.255.252

22

service-module t1 timeslots 1-24 ! interface FastEthernet1/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! router bgp 64512 no synchronization bgp log-neighbor-changes timers bgp 12 36 redistribute connected neighbor 192.168.1.2 remote-as 65000 neighbor 192.168.1.6 remote-as 65000 no auto-summary ! ip forward-protocol nd ! ip nat inside source list 1 interface FastEthernet1/0 overload ! access-list 1 permit 10.10.100.0 0.0.0.255

hostname VRF1-CE2 ip cef ! no ip dhcp use vrf connected ip dhcp excluded-address 10.10.200.1 10.10.200.100 ip dhcp excluded-address 10.10.200.200 10.10.200.254 ! ip dhcp pool sdm-pool2 import all network 10.10.200.0 255.255.255.0 domain-name CAPSTONE.LOCAL dns-server 10.10.200.21 4.2.2.2 default-router 10.10.200.1 ! no ip domain lookup ip name-server 10.10.200.2 ip name-server 4.2.2.2 ip auth-proxy max-nodata-conns 3 ip admission max-nodata-conns 3 ! interface Loopback0 ip address 10.255.0.2 255.255.255.255 !

23

interface FastEthernet0/0 ip address 10.10.200.1 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0 description Connected to PE3 S1/2 ip address 192.168.1.9 255.255.255.252 no fair-queue service-module t1 timeslots 1-24 ! interface Serial0/1 description Connected to PE4 S1/2 ip address 192.168.1.13 255.255.255.252 service-module t1 timeslots 1-24 ! interface FastEthernet1/0 ip address dhcp ip nat outside ip virtual-reassembly duplex auto speed auto ! router bgp 64512 no synchronization bgp log-neighbor-changes timers bgp 12 36 redistribute connected neighbor 192.168.1.10 remote-as 65000 neighbor 192.168.1.14 remote-as 65000 no auto-summary ! ip forward-protocol nd ! ip nat inside source list 1 interface FastEthernet1/0 overload ! access-list 1 permit 10.10.200.0 0.0.0.255

isc capstone network design proposal

Documents